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CIRCUITS AND METHODS FOR RECOVERING LINK STACK DATA 
UPON BRANCH INSTRUCTION MIS-SPECULATION 

TECHNICAL FIELD 

The present invention relates generally to speculative computer instruction 
execution and in particular to circuits and methods for recovering link stack data upon 
5 branch instruction mis-speculation. 

BACKGROUND INFORMATION 

Modern high-frequency microprocessors are typically deeply pipelined 
devices. For efficient instruction execution in these machines, instructions are 
10 fetched and executed speculatively. In other words, a prediction is made as to the 



future need of a given instruction and that instruction is then fetched into the 



instruction pipeline many cycles before its predicted execution. Later, when the 



instruction is required, it is already available in the pipeline and can be immediately 
executed, otherwise, the instruction is flushed and the machine retrieves the 



15 



appropriate instruction from the instruction cache. 



Often there are one or more branches ( some of which maybe subroutine calls 
and returns) between the instructions that are being fetched and the instructions that 
are being executed in the processor execution units. Therefore, to handle subroutine 
calls and returns efficiently, many high frequency microprocessors employ a link 



20 



stack. On a subroutine call, the address of the following instruction is "pushed" into 
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the stack while on a subroutine return, the contents at the top of the stack (which is 
expected to contain the address of the instruction following the original subroutine 
call) are "popped" from the stack. Since pushing and popping from a hardware stack 
can normally be done when the branch is fetched, which occurs several cycles before 
the corresponding branches are executed in a deeply pipelined processor, such a 
linked stack mechanism helps implement the instruction fetching scheme across 
subroutine calls and returns to a great extent. Notwithstanding, the link stack can 
become corrupted during the process of speculative instruction fetching and 
execution. 

Consider, for example, the case where a subroutine call is performed using a 
"branch and link instruction" and a return from the subroutine is achieved using a 
"branch to link register" or "BrLR" instruction. It may happen that a BrLR 
instruction, which for example returns to a location "A", is fetched speculatively 
followed by a speculative fetch of a 'branch and link" instruction, for example from 
call-site B. The link stack is updated at fetch time, such that after these instructions 
are fetched, the address location "A" is replaced by the address location"B+4" (each 
instruction consisting of four bytes, for example) at the top of the link stack. Since 
both the BrLR and "branch and link" instructions are speculatively fetched, they may 
not ultimately be in the actual execution path. If these instructions are not in fact in 
the actual execution path (in which case the instructions are flushed out), the link 
stack becomes corrupted. 

Generally, anytime one or more BrLR instructions are followed by one or 
more "branch and link" instructions in the speculated path, the link stack becomes 
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corrupted if the speculation turns out to be wrong. For a commercial programming 
workload, about 2% of the instructions are BrLR instructions and therefore it becomes 
very important to be able to predict the target address for these instructions with a 
good degree of accuracy in deeply pipelined machines. Thus, there exists a need for 
5 circuits, systems and methods to detect link stack corruption, as well as to recover a 

link stack from a corrupted condition. Since methods already exist to deal with 
mis-predictions in speculative instructions, the circuits, systems and methods used to 
deal with link stack corruption in these cases are not put in place to insure correct 
functional behavior, but rather, to improve execution speed. Various degrees of link 
10 stack corruption may occur on mis-predictions in speculative instruction execution 

and the better the recovery the less system speed will be degraded. 
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SUMMARY OF THE INVENTION 

The present inventive principles are embodied in methods of performing 
operations to a link stack. When a Pop operation is performed from the link stack, a 
first pointer value to the link stack, the first pointer value being the value of the 
pointer to the link stack before the Pop operation, is stored along with a first address 
including a first tag popped from the link stack. When a Push operation is performed 
to the link stack, a second address including a second tag being Pushed into the link 
stack is stored along with a second pointer to the link stack, the second pointer being 
the value of the pointer to the link stack after the Push operation. The link stack can 
then be selectively recovered after an instruction flush by comparing the first and 
second pointer values and the first and the second tags. An address at the top of the 
link stack is then replaced with the stored first address when the first and second 
pointers match and the first and second tags match. 

Another embodiment of the present invention tracks the operation of a link 
stack in a tracking queue containing and operation field and a corresponding link 
stack pointer field. A first register stores a link stack correction address and a second 
register stores a correction link stack pointer and a third register stores a Boolean 
value as the result of a Push operation and a Deallocate operation. The Boolean value 
is set and tested during Pop, Push and Flush operations on the link stack. In this 
embodiment both the link stack entry and a corresponding link stack pointer may be 
corrected. 

The present inventive principles provide a simple mechanism for recovering a 
link stack after a sequence of Pop and Push operations. Specifically, the amount and 
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complexity of the necessary circuitry are minimal which makes implementation of 
these principles relatively easy and inexpensive. 

The foregoing has outlined rather broadly the features and technical 
advantages of the present invention in order that the detailed description of the 
invention that follows may be better understood. Additional features and advantages 
of the invention will be described hereinafter which form the subject of the claims of 
the invention. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

For a more complete understanding of the present invention, and the 
advantages thereof, reference is now made to the following descriptions taken in 
conjunction with the accompanying drawings, in which: 

FIGURE 1 A is a high level functional block diagram of a representative data 
processing system suitable for practicing the principles of the present invention; 

FIGURE IB is a high level functional block diagram of selected operational 
blocks within a CPU; 

FIGURE 2A illustrates operation tracking queue and link stack mechanisms; 

FIGURE 2B illustrates phases of the life cycle of operations used in 
embodiments of the present invention; 

FIGURES 2C-2D illustrate an operation tracking queue and a link stack; 

FIGURES 2E-2G illustrate examples of operation states in an operation 
tracking queue and a link stack; 

FIGURE 3 A illustrates operation tracking queue and link stack mechanisms in 
an embodiment of the present invention; 

FIGURES 3B-3C illustrate examples of operation tracking queue and link 
stack operation algorithms used in embodiments of the present invention; 

FIGURES 3D-3F illustrate examples of operation tracking queue and link 
stack operation in embodiments of the present invention; 
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FIGURE 4A illustrates an operation tracking queue and link stack used in 
alternate embodiments of the present invention; 

FIGURES 4B-4D illustrate an operation tracking queue and link stack 
algorithms used in alternate embodiments of the present invention; and 

FIGURES 4E-4G illustrate examples of an operation tracking queue and link 
stack operation in alternate embodiments of the present invention. 
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DETAILED DESCRIPTION 

In the following description, numerous specific details are set forth to provide 
a thorough understanding of the present invention. It should be noted, however, that 
those skilled in the art are capable of practicing the present invention without such 
specific details. In other instances, well-known circuits have been shown in block 
diagram form in order not to obscure the present invention in unnecessary detail. 

All such variations are intended to be included within the scope of the present 
invention. It will be recognized that, in the drawings, only those signal lines and 
processor blocks necessary for the operation of the present invention are shown. 

Referring to the drawings, depicted elements are not necessarily shown to 
scale, and like or similar elements are designated by the same reference numeral 
through the several views. 

Refer now to FIGURE 1 A which is a high level functional block diagram of a 
representative data processing system 100 suitable for practicing the principles of the 
present invention. Data processing system 100 includes a central processing system 
(CPU) 110 operating in conjunction with a system bus 1 12. CPU 110 may be a 
reduced instruction set computer (RISC), such as an IBM POWER Processor, or a 
complex instruction set computer (CISC). System bus 1 12 operates in accordance 
with a standard bus protocol, such as the ISA protocol, compatible with CPU 110. 

CPU 110 operates in conjunction with read-only memory (ROM) 116 and 
random access memory (RAM) 1 14. Among other things, ROM 1 16 supports the 
basic input output system (BIOS). RAM 114 includes, for example, DRAM 
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(Dynamic Random Access Memory) system memory and SRAM (Static Random 
Access Memory) external cache. 

I/O Adapter 118 allows for an interconnection between the devices on system 
bus 1 12 and external peripherals, such as mass storage devices (e.g., a hard drive, 
floppy drive or CD/ROM drive), or a printer. A peripheral device 120 is, for 
example, coupled to a peripheral control interface (PCI) bus, and I/O adapter 118 
therefore may be for example PCI bus bridge. User interface adapter 122 couples 
various user input devices, such as keyboard 124, mouse 126, touchpad 132 or 
speaker 128 to the processing devices on bus 112. Display adapter 136 supports a 
display 138 which may be for example a cathode ray tube (CRT), liquid crystal 
display (LCD) or similar conventional display unit. Display adapter 136 may include 
among other things a conventional display controller and frame buffer memory. 

System 100 can be selectively coupled to a computer or telecommunications 
network through communications adapter 134. Communications adapter 134 may 
include, for example, a modem for connection to a telecommunications network 
and/or hardware and software for connecting to a computer network such as a local 
area network (LAN) or wide area network (WAN). 

FIGURE IB is a high level functional unit 150 illustrating selected operational 
blocks within CPU 1 10. In the illustrated embodiment, CPU 110 includes an internal 
instruction cache (I-cache) 151 and data cache (D-cache) 158 which are accessible 
through bus 112 (FIGURE 1A) and bus interface unit 157 and load/store unit 155. Li 
the depicted architecture, CPU 110 operates on data in response to instructions 
retrieved from I-cache 151 through instruction dispatch unit 153. In response to 
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dispatch instructions, data retrieved from D-cache 158 by load/store unit 155 can be 
operated upon using either fixed point execution unit 154 or floating point execution 
unit 156. Instruction branching is controlled by branch/ system processing unit 152. 
FIGURE 2A illustrates features and functions of an operation tracking queue 

5 (OTQ) 20 1 and a link stack (LS) 211. LS 2 1 1 stores addresses 2 1 2 and current link 

stack pointer (CUR_LS__ptr) 213 points to a particular register in the stack storing 
address 212. The OTQ 201 is a register stack that contains operations that are being 
tracked during instruction execution. Each entry in OTQ 201 has two register fields, 
OPERATIONinfo field 202 (description of the operation) and LS_ptr field 203 

10 (contains a link stack pointer associated with the corresponding operation). If the 

instructions being tracked only include "branch and link" (BrL) and "branch to link 
register" (BrLR) instructions, then the operations would include PUSH (add addresses 
to LS 21 1) and a POP (extract an address from LS 21 1). A BrL instruction is used in 
a subroutine call where the processor branches to instructions in the subroutine and 

1 5 the return address is next instruction after the subroutine call. The return address is 

stored in or "pushed onto" a link stack (e.g., LS 21 1). When the processor gets to the 
end of the subroutine, a BrLR instruction branches back to the previously stored 
return address in the link stack (e.g., LS 211). In this case, the return address is 
retrieved from or "popped from" the link stack (e.g., LS 211). 

20 In general, however, the OTQ 201 may be a queue that is tracking all 

instructions or some other subset of instructions pending in a processor's execution 
stream. POP and PUSH operations on LS 21 1 use a "last in first out" (LIFO) 
protocol. PUSH operations move addresses down LS 21 1 and POP operations extract 
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addresses off the top of LS 21 1 (again LIFO defines the top of the link stack). Loop 
214 indicates that sequential PUSH operations, which exceed the size of LS 21 1, will 
cause the CUR__LS_ptr to "wrap" around LS 21 1 . Operations that are added to OTQ 
201 are "allocated" and an allocate pointer ( ALLOC ATE_ptr) 205 indicates where the 
next operation will be added. Operations are "deallocated" (removed) whenever a 
pending instruction, associated with an address 212, has been committed (will be 
executed in the non speculative instruction path). Deallocate pointer 
(DEALLOCATE_ptr) 206 indicates which operation will be deallocated. If a 
sequence of pending instructions, possibly associated with a sequence of addresses 
212 (thus operations utilizing these addresses), are not going to be executed 
(determined by the processor or CPU), then these operations are removed with a 
"flush". Flush pointer (FLUSH_ptr) 208 points to the beginning of the sequence of 
operations to be removed. An allocate counter (ALLOCATE_count) 207 keeps track 
of the number of pending operations in OTQ 201 . At any one time there exists a 
group of operations in the OTQ 201 that are active and these are indicated by 
ACTIVE OPERATIONS 204 from ALLOCATE _jptr 205 to and including 
DEALLOCATE_ptr 206. Loop 215 indicates that ALLOCATE__ptr 205 and 
DEALLOCATE_ptr 206 wrap around OTQ 201. 

FIGURE 2B is a flow diagram of processor operations that may occur when an 
OTQ 201 and an LS 21 1 are used to track operations. When a processor is doing 
speculative instructive execution (using algorithms to predict and execute future 
instructions) outside of the "committed" or actual instruction execution stream, then 
the instructions may trigger operations that are tracked in an OTQ 201 and LS 21 1 . In 
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step 220, an instruction is fetched from an instruction cache (e.g., ICACHE 151). 
The instruction is decoded in step 221. Decoding an instruction leads to a 
determination whether the instruction should also trigger operations that will be 
tracked in a queue(e.g., exemplary OTQ 201). If an instruction triggers an operation 
that is to be tracked, then an OTQ_ALLOC 239 (described in conjunction with the 
flow diagram in FIGURE 2C) would be used to allocate or add the operation to OTQ 
201 . Since the processor may have many instructions in its pipeline, there may be 
many computer cycles between a decode in step 221 and an actual instruction 
execution in step 222. An execution in step 222 would generate results that would be 
compared to results from a corresponding speculative execution. This compare may 
determine that a speculative (look ahead) path has been actually taken in the 
committed instruction execution stream. If the results of the instruction execution of 
step 222 determine that a sequence of speculative instructions (operations tracked in 
OTQ 201) will not be executed in the committed instruction execution stream, then 
the OTQ 201 operations are flushed or removed. A FLUSH in step 225 triggers an 
OTQ_FLUSH 279 (described in conjunction with the flow diagram in FIGURE 2E) 
which flushes operations of OTQ 201. If the execution in step 222 generates results 
that indicate that the speculative instructions will be executed, then a commit in step 
224 executes an OTQ_DEALLOC 259 (described in conjunction with the flow 
diagram in FIGURE 2D) which will remove the OTQ 201 operation (pointed to by 
DEALLOCATE_ptr 206) and possibly an associated address 216 in the LS 213. It 
should be noted that the operations in the OTQ 201 and the LS 21 1 are not removed 
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in the sense of erased, instead removed operations are free to be written over by 
subsequent OTQ 201 operations. 

FIGURE 2C is a flow diagram for algorithms for the OTQ_ALLOC 239 
operation to OTQ 201 used in FIGURE 2A. In step 240, the OTQ_ALLOC 239 is 
5 called. Step 241 tests if ALLOCATE count 207 has a count less than the size of the 

register stack in OTQ 201. This test determines whether OTQ 201 is full. If the 
result of the test in step 241 is NO, then a wait via a STALL is executed in step 242. 
As soon as OTQ 201 is able to accept an operation, the ALLOC ATE_count 207 is 
incremented in step 243. In step 244, the information defining the operation (POP, 

1 0 PUSH or OTHER) is placed in the OPERATION info 202 field of the register 

position pointed to by the ALLOCATE_ptr 205. Step 245 tests whether the operation 
is a PUSH. If the result of the test in step 245 is a YES, then in step 246 the PUSH 
address (the address of the instruction following the PUSH is associated with the 
OPERATIONjnfo 202) is placed the LS 21 1 register pointed to by the CUR_LS_ptr 

15 2 1 3 . In step 247, the CUR_LS jptr 2 1 3 is incremented one position. In step 25 1 , the 

value of CUR_LS_ptr 213 is placed into the LS_ptr field 203 of the register in OTQ 
201 pointed to by ALLOC ATE_ptr 205. In step 252, the ALLOCATE_ptr 205 is 
incremented (moved down one position). Step 253 executes an END of 
OTQ_ALLOC 239. If the result of the test in step 245 is NO, then the operation is 

20 not a PUSH, then a test is done in step 248 to determine if the operation is a POP. If 

the result of the test in step 248 is YES, then the operation in step 248 is a POP. In 
step 249, CUR LS_ptr 213 is decremented. In step 250, the POP address ( placed in 
the LS 213 in a previous PUSH) is read from the register in LS 21 1 pointed to by 
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CUR_LS_ptr 213. Following step 250, steps 251, 252, and 253 are executed as in the 
PUSH operation after a YES in step 245. If the result of the test in step 248 is NO, 
then the operation is not a POP (an OTHER operation), then a branch to step 25 1 is 
executed followed by steps 252 and 253 as in the PUSH and POP operations. 
5 FIGURE 2D is the flow diagram for algorithms of the OTQ_DEALLOC 259 

and the OTQ_FLUSH 279 used in OTQ 201 in FIGURE 2A. In step 260, the 
OTQ DEALLOC 259 is called and in step 261 ALLOCATEcount 207 is 
decremented. In step 262, DEALLOCATE_ptr 206 is incremented by one. 
Incrementing DEALLOCATE_ptr 206 frees the register it was pointing to so it can be 
1 0 used for a future OTQ_ALLOC 239 In this sense the operation is removed from OTQ 

201. After step 262 an END is executed in step 263 to complete OTQ_DE ALLOC 
259. 

FIGURE 2E is a flow diagram for an OTQ_FLUSH 228. In step 280, an 
OTQ_FLUSH 279 is called. In step 281, the quantity ALLOC ATEjptr 205 minus 

15 FLUSHjptr 208 is calculated. This quantity is then subtracted from the count in 

ALLOCATE count 207. ALLOCATE count 207 now indicates how many register 
positions are open in OTQ 201. In step 282, the value of ALLOC ATE_ptr 205 is set 
to FLUSHjptr 208. This operation frees the register positions in OTQ 210 previously 
held by the flushed operations for subsequent allocated operations. In step 283, 

20 FLUSH_ptr 208 is decremented moving it up, or opposite the direction 

ALLOCATEjptr 205 moves, as new operations are allocated. In step 284, 
CURJLSjptr 213 is set to the value in the LSjptr field 203 of the register pointed to 
by FLUSHjptr 208. An END is executed in step 285 to complete OTQ_FLUSH 227. 
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FIGURES 2F-2H illustrate the states of register fields in the OTQ 201 and LS 
2 1 1 for various stages in a flush cycle of an OTQ JFLUSH 279. FIGURE 2F 
illustrates the states of register fields of OTQ 210 before an OTQ_FLUSH 279. OTQ 
201 contains active operations between ALLOC ATE _ptr 205 and 
DEALLOCATE_ptr 206. These active operations were placed in OTQ 201 using a 
sequence of OTQ_ALLOC 239 operations; no OTQ_DEALLOC 259 has yet occurred 
in this example. DEALLOCATEjtr 206 is pointing to a register whose operation 
field 221 contains PUSH ABCD and whose link stack field 220 contains a value "3". 
ALLOC ATEjrtr 205 points to a blank register 224 in OTQ 201 (in general registers 
have contents but a blank register illustrates one that may be written into). 
CUR_LS_ptr 213 also points to a blank register in LS 21 1. Following the flow 
diagrams of the algorithms for OTQ_ALLOC 239 (PUSH, POP and OTHER) in 
FIGURES 2C-2D shows how the fields of OTQ 201 and LS 21 1 arrived at the values 
indicated in FIGURE 2E. LS 21 1 register addresses 222 are shown as 2-4, other 
addresses (e.g.,1 and 5-N) are not shown for simplicity but are implied where N is the 
size of LS 21 1 . The operations in registers from DE ALLOC ATE_ptr 206 to, but not 
including, ALLOCATE_ptr 205 (active operations of OTQ 201 in FIGURE 2E) had 
to occur as the result of a subroutine call using a BrL (branch and link) instruction 
(pushes address ABCD onto LS 21 1). This is followed by a first nested subroutine 
call using another BrL (pushes address EFGH onto LS 21 1). This is followed by 
another non-push, non-pop operation. This is followed by a BrLR instruction 
expected to return from the first nested sub-routine. This is followed by a second 
nested sub-routine call using another BrL (pushes IJLK onto LS 21 1 in same position 
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previously occupied by EFGH. In the present example, other logic (not shown) may 
determine that one or more of the most recent active operations will not be committed 
and that they should be flushed. 

FIGURE 2G illustrates register states of OTQ 201 and LS 21 1 in the case 
where one entry (PUSH IJKL) has been flushed. Register 223 contains the operation 
that is to be flushed (by definition for this example); this determination was made by 
other processor logic (not shown). ALLOCATEjptr 205 points to a blank register 
223. Since only one operation is to be flushed, execution of OTQ_FLUSH 279 places 
FLUSH jptr 208 to the desired point in OTQ 201 (register 223). The number of 
operations to be flushed is calculated as in step 281 of FIGURE 2D, then 
ALLOC ATE_ptr 205 is set to the value of FLUSH jptr 208 (points to register 223) 
and then the FLUSH_ptr 208 is decremented to point to register 216. 
ALLO€ATE_ptr 205 is now pointing to the next register position in which a new 
operation will be allocated (register 223). Register 223 contains the operation that has 
been flushed (a new allocated operation will write over the information in register 
223). Step 284 of OTQ_FLUSH 279 in FIGURE 2D sets CUR_LS_ptr 213 to the 
value found in the LSjrtr field 203 of the register pointed to by FLUSH jptr 208 
(register 216 with LS_j)tr field value of 3) once it has been decremented. LS 21 1 
register 225 (indicated by 3) contains an address 215 (IJKL). The method in FIGS. 
2C-2D avoids the flushed address IJKL by decrementing CURJLS j>tr 213 before a 
POP address is read from the link stack LS 21 1. 

FIGURE 2H illustrates the case where two OTQ 201 entries are flushed. The 
OTQJFLUSH 279 of FIGURE 2D will again be executed. In this example, the 
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FLUSH_ptr 208 would first be set to point to register 216 by processor logic (not 
shown) and ALLOCATE_ptr 205 would point to register 224 (see FIGURE 2E). The 
difference between FLUSHjrtr 208 and ALLOCATE_ptr 205 would be calculated 
and ALLOCATEcount 207 (see FIGURE 2A) decremented (two counts for this 
5 example). ALLOCATE_205 would then be set to the value of FLUSH_ptr 208 

(points to register 216) and then FLUSH_ptr 208 would be decremented one position 
to register 218. Since the LSjptr field 203 of register 218 contains a value of "4", 
then this value is set into CUR_LS_ptr 213 which then points to LS 21 1 register 227 ( 
register address is "4"). A new OTQ_ALLOCATE 239 would place the next 

10 operation into register 216 and the address from the OPERATIONinfo field 202 into 

register 227 (pointed to by CUR_LS_ptr 213). For this two-entry flush example, a 
subsequent POP operation would decrement CUR_LS_ptr 213 to register 228 which 
contaias a corrupted LS 21 1 address UKL (address associated with flushed PUSH 
DKL). The two entry flush, using the OTQ 201 and link stack 21 1 in FIGURE 2A 

1 5 and the algorithms of FIGURES 2C-2D, does not correct the corrupted address in 

register 228 of LS 21 1. The flow diagram shown in FIGURES 2C-2D and explained 
in the examples in FIGURES 2F-2H corrects some link stack corruptions, however as 
the example in FIGURE 2H indicates some corruption may still occur which is not 
corrected and machine performance may suffer in these instances. 

20 FIGURE 3 A illustrates an OTQ 306, LS 307 and additional registers 3 14, 3 10 

and 3 1 1 used in another embodiment of the present invention. OTQ 306 has a field, 
LSjag 305, in addition to the register fields in OTQ 201 illustrated in FIGURE 2A. 
OTQ_306 also contains register field OPERATION info field 303 and LS_ptr field 
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304 as did OTQ 201 illustrated in FIGURE 2A. LS 307 has addresses 308 and 
CUR_LS_ptr 309. OTQ 306 has DEALLOCATE_ptr 301, ALLOCATE_ptr 302, 
ALLOC ATEcount 313, and FLUSH_ptr 312 which have functions as explained for 
OTQ 201 above. OTQ 306 has an additional register, PREVLStag 314, which 

5 stores a particular tag from the LS_tag field 305. In this example, the LS_tag field 

305 value is the middle portion of the PUSH address (e.g., for address ABCD LS_tag 
would be BC). LS 307 has addition registers for storing link stack correction pointers 
(LS_CORRECTION_ptr 310) and link stack correction addresses 

(LS CORRECTION addr 311). LS 307 includes LS addresses 308 and CUR_LS_ptr 
10 309. 

FIGURES 3B and 3C are flow diagrams illustrating OTQ_ALLOC process 
320 and OTQ_FLUSH process 380, respectively, for the embodiment illustrated in 
FIGURE 3 A. Referring first to FIGURE 3B, in step 321, the OTQ_ALLOC 320 is 
called. Step 322 tests if ALLOCATE count 313 has a count less than the size of 
1 5 OTQ 306. This test determines whether OTQ 306 is full. If the result of the test in 

step 322 is NO, then a wait via a STALL is executed in step 340. As soon as OTQ 

306 is able to accept an operation, the ALLOC ATEcount 313 is incremented in step 
323. In step 324, the information defining the operation (POP, PUSH or OTHER) is 
placed in the OPERATIONinfo 303 field of the register pointed to by the 

20 ALLOCATE_ptr 302. Step 325 tests if the operation is a PUSH. If the test result is 

YES, a branch to step 326 is executed where a link stack tag(LS_tag) is extracted 
from the PUSH address (middle portion the PUSH address of the PUSH operation). 
This is a portion of the PUSH address that is adequate to generate an LS tag 305 that 
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is likely to be unique for the OTQ 306. In step 328, the extracted link stack tag is 
placed, as LS_tag 305, in the link stack tag field of the register in OTQ 306 pointed to 
by ALLOCATE_ptr 302. In step 329, the value in LS_tag field 304 is also placed in 
PREV_LS_tag register 314. hi step 330, the PUSH address from the PUSH operation 
5 is placed in the LS 307 register pointed to by CURJLSjptr 309. In step 331, 

CUR_LS_ptr 309 is incremented by one. In step 333, the CUR_LS_ptr 309 is then 
place in the LS_ptr field 304 in OTQ 306. In step 332, ALLOCATE_ptr 302 is 
incremented by one and an END is executed in step 339 completing OTQ_ALLOC 
320. If the result of the test in step 325 is NO, then in step 336 the value from 

1 0 PREV LS_tag 3 1 4 is placed in the OTQ 306 register pointed to by ALLOCATE_ptr 

302. In step 338, a test to determine if the OTQ 306 POP operation is executed. If 
the result of the test is YES, then in step 335 the CUR_LS_ptr 309 is placed in the 
LS_CORRECTION_ptr register 310. hi step 337, CUR_LS_ptr 309 is decremented 
by one. In step 334, the POP address is read from the LS 307 register pointed to by 

1 5 CUR_LS_ptr 309. In step 341 , the POP address read in step 334 is placed in 

LS CORRECTION addr register 311. Next steps 333, 332 and 339 are executed as 
in the PUSH operation above completing OTQ_ALLOC 320. If the result of the test 
in step 338 is NO then a branch to step 333 is executed and steps 333, 332 and 339 
are executed as in the POP operation above completing OTQ_ALLOC 320. 

20 Referring now to FIGURE 3C, in step 390, an OTQJFLUSH 380 is called. In 

step 390, the quantity, ALLOCATEjptr 302 minus FLUSH_ptr 312, is calculated (a 
FLUSH removes all the operations from the FLUSH_ptr 312 to ALLOCATE_ptr 
302). This quantity is then subtracted from the count in ALLOCATE count 313. 
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ALLOCATE count 313 now indicates how many registers are open in OTQ 306. In 
step 391, ALLOCATE _ptr 302 is set to FLUSH_ptr 312. This operation frees the 
registers in OTQ 306 previously used by the flushed operations for subsequent PUSH 
operations. In step 392, FLUSH_ptr 312 is decremented moving FLUSH_ptr 312 
5 opposite the direction ALLOCATE_ptr 302 moves as new operations are allocated to 

OTQ 306. In step 387, the value from LSjag field 304 of the register in OTQ 306 
pointed to by FLUSH_ptr 3 12 is placed in register PREV_LS_tag 3 14. In step 388, 
an LS_tag is extracted from the link stack correction address 
(LSCORRECTIONaddr) from the LS CORRECTION addr 3 1 1 register. A test is 

10 executed in step 383 to determine if the LSjag, extracted from 

LS_CORRECTION_addr 311, matches the value from LSjag field 305 in the OTQ 
306 register pointed to by FLUSHjptr 3 12. If they do not match in step 383, then an 
END is executed in step 386 completing OTQ_FLUSH 380. If there is a match in 
step 383, then a test is made in step 384 to determine whether CUR_LS_ptr 309 

1 5 matches the LS_ptr in LS_CORRECTION_ptr register 310. If there is no match in 

step 384, then an END is executed in step 386 completing OTQ_FLUSH 380. If there 
is a match in step 384, then the value in LS CORRECTION addr register 310 is 
placed in the LS 307 register pointed to by CUR_LS_ptr 309 when decremented by 
one. Then an END is executed in step 386 completing OTQ_FLUSH 380. 

20 FIGURES 3D-3F illustrate states of register fields in OTQ 306 and LS 307 

and various other registers in the embodiment of FIGURE 3 A. FIGURE 3D 
illustrates the states of registers after five operations, PUSH ABCD, PUSH EFGH, 
OTHER, POP, AND PUSH UKL have been allocated to OTQ 306. OTQ FLUSH 
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process in FIGURE 3B may be used insetting the register states in FIGURE 3D. The 
states in FIGURE 3D may represent the states prior to a single entry FLUSH 
operation. The subsequent FLUSH may use OTQ_FLUSH process 380 in FIGURE 
3C. FLUSHj)tr 312 is first set to the operation to be flushed by processor logic (not 
5 shown). In FIGURE 3E only one operation is to be flushed, so FLUSH_ptr 3 12 is set 

to register 315 (PUSH IJKL operation). The value in LS Jag field 305 (two middle 
portions "JK" of push address "IJKL") is placed in PREVLSjag register 313. The 
corresponding LS_tag is extracted from LS_CORRECTION_addr register 31 1 (again 
in this example the middle two portions from EFGH). The LS_tag 309 from the 

1 0 operation to be flushed and the LS Jag extracted from LS CORRECTION_addr 

register 31 1 do not match, therefore no action is taken and the OTQJFLUSH 381 is 
ended. CUR__LS_ptr 309 points to register 314 with a corrupted entry. A subsequent 
POP would decrement CURJLSjrtr 309 to point to register 310 before the address is 
read, therefore the corrupted entry in register 314 would be avoided and the correct 

1 5 POP address ABCD would be read. If the next operation is a PUSH, then the 

corrupted entry in register 314 would be overwritten. 

FIGURE 3F illustrates register states of FIGURE 3D when two entries are 
flushed. When two entries are flushed, FLUSH jrtr 3 12 is set, by processor logic (not 
shown), to point to register 317 (POP operation). Following method steps 390-392 of 

20 OTQ_FLUSH process 380 in FIGURE 3C, the ALLOCATE_ptr 302 will point to 

register 317 and FLUSH j>tr 312 is decremented to point to register 316 with LSjag 
318 (contains value FG). Method steps 382, 387, and 388 (FIGURE 3C) set up the 
comparisons in steps 383 and 384 (FIGURE 3C). Since both the comparisons match, 
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step 385 is executed and the address in LSCORRECTIONaddr register 31 1 is 
placed in the register pointed to by the decremented (by one) CUR__LS_ptr 309. This 
corrects LS 307 entry 316 to EFGH. The corrupted LS 307 address entry 316 (IJKL), 
set by of flushed PUSH IJKL, is replaced by EFGH (the next PUSH address that a 
POP operation should read). CUR LS jptr 309 is pointing to the correct register if a 
PUSH operation is next executed. This embodiment corrects both the corrupted LS 
307 entry and CUR_LSj3tr 309. 

FIGURE 4A illustrates register states in OTQ 406 and an LS 407 used in 
another alternative embodiment of the present invention. Each register in OTQ 406 
has an OPERATON_info field 405 and a LS_j>tr field 404. Registers in LS 407 store 
addresses 408. CUR_LS_ptr 409 points to a register that is accessed during 
operations on OTQ 406 and LS 407. ALLOCATE_ptr 402 points to register positions 
in OTQ 406 where operations are to be added or "allocated" for tracking. 
DE ALLOC ATE_ptr 401 points to a register containing operations that have been 
committed and are to be "removed" (can be written over) from OTQ 406. 
FLUSH_ptr 412 points to the register containing the last operation in a sequence to be 
removed or flushed from OTQ 406 because the operations will not be committed in a 
normal execution. ALLOC ATE_count 413 indicates the number of active operations 
in OTQ 406. Registers 410, 414 and 415 hold link stack correction information and 
are named, link stack correction address (LS CORRECTION addr) 410 register, link 
stack correction pointer (LS_CORRECTION_LS__ptr) register 411, and link stack 
correction valid (LS CORRECTION valid) register 415, respectively. 
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LS_CORRECTION_OTQ_ptr 414 is a pointer used in the algorithm enhancements of 
the embodiment in FIGURE 4A. 

FIGURE 4B is a flow diagram of OTQ_ALLOC process 420 used to allocate 
operations to OTQ 406 in the embodiment of FIGURE 4A. In step 421, 
5 OTQ_ALLOC 420 is called. Step 422 checks to see if OTQ 406 is full. If OTQ 406 

is full, a wait is executed via a STALL in step 427 until an operation can be allocated. 
If OTQ 406 is not full in step 422, ALLOCATE _count 413 is incremented 
(indicating an operation is adding) by one. In step 424, operation information is 
placed in OPERATION info field 405 of the register in OTQ 406 pointed to by 

1 0 ALLOCATE_ptr 402. The operation information has details of the instructions be 

tracked (e.g., instruction type and operand). The allocated operation is tested in step 
425 to see if it is a PUSH operation. If the result of the test is YES in step 425, then 
in step 426 the PUSH address in the LS 407 register pointed to by CUR_LS_ptr 409 
is placed in LS_CORRECTION_addr register 410. In step 428, CUR_LS_ptr 409 is 

1 5 placed in LS_CORRECTION_LS_ptr register 411. In step 429, ALLOCATE_ptr 402 

is placed into LS_CORRECTION_OTQ_ptr 414. A boolean TRUE is placed in 
LS_CORRECTION_valid register 415 in step 430. In step 431, the address (PUSH 
address) is placed in the LS 407 register pointed to by CUR_LS_ptr 409. In step 435, 
CUR_LS_ptr 409 is incremented by one. CUR_LS_ptr 409 is placed into LS_ptr 

20 field 404 of OTQ 406 in step 433 and ALLOCATE_ptr 402 is incremented by one in 

step 432. An END awaiting a new operation is executed in step 439 completing 
OTQ_ALLOC 420. 
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Returning to step 425, if the operation in step 425 is not a PUSH, then a test to 
determine if the operation is a POP is done in step 438. If the result of the test is NO 
in step 438, the CUR_LSjptr 409 is decremented by one in step 436 and the POP 
address is read from the register pointed to by CUR_LS_ptr 409 in step 434. After 
5 step 434, then steps 433, 432, and 439 are executed as in a PUSH operation of 

FIGURE 4B. If in step 438 the operation is not a POP, then steps 433, 432 and 439 
are executed as in a PUSH or POP operation of FIGURE 4B. 

FIGURE 4C is a flow diagram of the OTQ_DEALLOC process 459 used in 
one operation of the embodiment of FIGURE 4A. In step 460, an OTQ_DE ALLOC 

10 459 is called. In step 461, ALLOC ATE_count 412 is decremented by one count. In 

step 462, a test is done to determine if DEALLOCATE_ptr 401 matches the value in 
LS_CORRECTION_OTQ_ptr 414. If there is a match in step 462, then a boolean 
FALSE is placed in LS_CORRECTION_valid register 415 and DEALLOCATE_ptr 
401 is decremented by one in step 464. An END is executed in step 465 completing 

1 5 OTQ_DEALLOC 459. If in step 462 there is no match, then a branch to step 464 is 

executed and DE ALLOC ATE_ptr 401 is decremented by one. An END is executed 
in step 465 completing OTQ_DEALLOC 459. 

FIGURE 4D is a flow diagram an OTQ_FLUSH process 480used in the 
embodiment in FIGURE 4A. In step 481, an OTQ_FLUSH 480 is called. Instep 

20 482, a test is done to determine if the value in LS_CORRECTION_OTQ_ptr 414 

register falls between ALLOCATE_ptr 402 and FLUSH_ptr 412. If the test result in 
step 482 is YES, then a test in step 483 is done to determine if 
LS_CORRECTION_valid is set to a boolean TRUE. If the test result in step 483 is 
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NO, then in step 489 the quantity ALLOCATE_ptr 402 minus FLUSH_ptr 412 is 
calculated and subtracted from ALLOCATEcount 413. In step 488, 
ALLOCATE_ptr 402 is set to FLUSH_ptr 412. FLUSH_ptr 412 is decremented by 
one in step 487. In step 486, CUR_LS_ptr 409 is set to the value in LS_ptr field 404 
5 of the register in OTQ 406 pointed to by FLUSH_ptr 4 1 2. An END awaiting a next 

operation is executed in step 491 completing OTQ_FLUSH 480. If the test result in 
step 483 is YES, then a boolean FALSE is placed in LS_CORRECTION_valid 
register 415 in step 484. In step 485, the address in LS CORRECTION addr 410 is 
placed into the LS 407 register pointed to by the value in LS_CORRECTION_LS_ptr 

10 411. Steps 489, 488, 487, 486 and 491 are then executed in sequence as described 

above completing OTQ_FLUSH 480. 

FIGURES 4E-4G illustrate states of register fields in the embodiment of 
FIGURE 4A. FIGURE 4E illustrates the states of the register fields after an operation 
sequence PUSH ABCD, PUSH EFGH, OTHER, POP, and PUSH HKL executed 

1 5 according to the method steps in FIGURES 4B and 4C. FIGURE 4F illustrates the 

register states for a single entry FLUSH in accordance with OTQ_FLUSH process 
480 in FIGURE 4D. Referring to FIG. 4F, when a single entry FLUSH operation is 
executed on OTQ 406 and LS 407, LS_CORRECTION_OTQ_ptr will be pointing to 
the register containing the last PUSH operation and ALLOCATE_ptr 402 will be 

20 pointing to the next register position in which an allocated operation would be placed. 

Since the LS_CORRECTION_OTQ_ptr is between ALLOCATE_ptr 402 and 
FLUSH_ptr 413 (only one entry is to be flushed), the YES path from step 482 is 
taken. Since LSCORRECTIONvalid 415 is set to TRUE, it is switched to FALSE. 
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Then the address from LS CORRECTION addr 410 is set into the LS 407 register 
pointed to by the LS_CORRECTION_LSjptr 411. The address of flushed PUSH 
DKL is replaced by the value in the LS CORRECTION addr register 410. A 
subsequent POP operation will now have a CUR_LSP__ptr 409 corrected and its 
corresponding address entry corrected by the value in LSCORRECTIONaddr 
register 410. 

FIGURE 4G illustrates the case where two entries are flushed from OTQ 406 
of the embodiment of FIGURE 4A. Since the LS„CORRECTION_OTQj)tr is 
between ALLOC ATE_j>tr 402 and FLUSH_ptr 413, the YES path from step 482, in 
FIGURE 4D, is executed. FLUSH jptr 413 will be decremented by one and point to 
register 417 which has a LS_ptr field 404 containing LS__ptr 409 value "4". In this 
case, CUR_LS_ptr 409 will be decremented by one on a subsequent POP to point to 
register 418 which contains the PUSH address EFGH which was previously 
POPPED. This means that the speculated instruction resulting in the POP (EFGH) 
was not committed in the actual instruction execution stream and the address EFGH is 
may be still valid for a subsequent speculated instruction resulting in a POP. A 
subsequent PUSH will allocate a PUSH address to the register pointed to by 
CUR _LS_j)tr 409 and the PUSH address EFGH will remain unless the PUSH EFGH 
is flushed. In this case, both the CURLS jrtr 409 and the entry are corrected. 

Although the present invention and its advantages have been described in 
detail, it should be understood that various changes, substitutions and alterations can 
be made herein without departing from the spirit and scope of the invention as defined 
by the appended claims. 
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